Forum Discussion
mframpton_60606
Nimbostratus
NimbostratusMSSQL Monitor w/Encryption
We have an environment (for PCI) that requires all connections coming in and out to be encrypted. I'd like to set up a MSSQL monitor to the databases in this environment, but I cannot find any settings to tell the monitor connection to the database to be encrypted. Anyone know if this is possible with the LTM or if there's plans to so? We're running 9.3.1.
TIA!
4 Replies
hoolioCirrostratus
I don't think there is support for encryption on the existing MSSQL (DB_monitor) monitor. Maybe someone can comment on any plans for this.
You could open a case with F5 Support and ask them to consider including it in a future version.
If you need to perform an application layer check using an encrypted connection, you could potentially script an external monitor using freetds. It looks like they might support encryption for MSSQL server:
http://www.freetds.org/userguide/freetdsconf.htm
Field: encryption
Options: off/request/required
Default: off
Description: Specify if encryption is desired. Supported for Microsoft servers. off disables encryption (only if needed); request means use if available; required means create and allow encrypted connections only.
You can find example external monitors in the Codeshare:
Advanced Design & Config CodeShare (Click here)
Aaron
mframpton_60606Thanks for the response! We did open a feature request with F5 about 2 years ago but they stopped updating us on it's status in 2007.- hoolioIf it's already been requested a while back and not implemented, you might consider contacting your account manager and ask for an update. If they don't plan on implementing it soon, you could look into an external monitor.
Aaron - mframpton_60606Thanks! I have sent an email to our account manager, hopefully he will be able to pick up where the other person left off.
